Hitachi id privileged access manager brochure

Hi t achiI DPr i vi l egedAccessManager

hi t achi i d. com

Se c ur i nga c c e s st opr i v i l e ge da c c ount s .

Hi t achiI DPr i vi l egedAccessManagersecur esadmi ni st r at orandser vi ce account sbyf r equent l yr andomi z i ngpasswor ds.Random passwor dsar e encr ypt edandst or edi nar epl i cat edvaul t .I tcont r ol sandl ogst heaccessof user sandappl i cat i onst opr i vi l egedaccount s.

P a s s wo r dRa nd o mi z a t i o n El i mi na t es t a t i cpa s s wor ds Byf r equent l yr andomi z i ngpasswor ds,Pr i vi l egedAccessManagerbl ockspasswor dcr acki ng at t acks,passwor dshar i ngandpr i vi l eger et ent i on.

Cha l l e ng e s Se c ur i t y Manysyst em admi ni st r at or sadmi tt owr i t i ng downandshar i ngpr i vi l egedpasswor ds.St af f of t enr et ai naccesst osensi t i vesyst emsaf t er l eavi nganor gani z at i on.Gi vent i me,passwor d cr acki ngsof t war ecanguessmanyst at i c passwor ds.Weakcont r ol soverpower f ul account sposeaser i oussecur i t yr i sk.

Coor di na t i on Ther ear epr i vi l egedpasswor dsonever ysyst em, i ncl udi ngoper at i ngsyst ems,dat abases,net wor k devi cesandappl i cat i ons.Changi ngt hese passwor dsi shar dt ocoor di nat eamongever y userofever ypasswor d.

Enc r y p t e d ,Re p l i c a t e dVa ul t Re l i a bl e ,f a ul t t ol e r a nta nds e c ur es t or a ge Random passwor dsar est or edi nanencr ypt eddat abase.Repl i cat i onpr ot ect sagai nstdat al oss.A mul t i mast erar chi t ect ur eensur eshi ghavai l abi l i t y,i ncl udi ngi nt heeventofal ocaldi sast er .

Ma nyBui l t i nCo nne c t o r s Ope r a t i ngs y s t e ms ,ne t wor kde v i c e s ,da t a ba s e sa nda ppl i c a t i ons Pr i vi l egedAccessManageri ncl udesconnect or sf orover100t ypesofsyst emsandappl i cat i ons, mor et hananycompet i ngpr oduct .I tcansecur et heent i r enet wor kwi t hmi ni malcust omi z at i on.

I nf r a s t r uc t ur eAut o d i s c o v e r y El i mi na t ema nua lc onfigur a t i onofma na ge ds y s t e msa nda c c ount s

Ke yBe ne fit s Byf r equent l yr andomi z i ngsensi t i vepasswor ds, Hi t achiI DPr i vi l egedAccessManagerpr event s unaut hor i z edaccessbycur r entandf or meruser s andel i mi nat est het hr eatofpasswor dcr acki ng.

Audi tl ogscr eat eaccount abi l i t yt omoni t or admi ni st r at i vechanges.

Anaut odi scover ysyst em findsandcl assi fiesser ver s,wor kst at i ons,ser vi cesandpr i vi l eged account s.Machi nedi scover ycanbebasedonAD,LDAP,CSV,DNSoranI Ppor tscan.

Di scover edsyst emsar epr obedt ofindl ocalser vi ces,account sandgr oups.Rul esdet er mi newhi ch di scover edsyst emsandaccount st omanageandwhatsecur i t ypol i cyt oat t ach.

Si ng l eSi g no nt oP r i v i l e g e dAc c o unt s El i mi na t epa s s wor ddi s pl a y Rat hert handi spl ayi ngpasswor ds,Pr i vi l egedAccessmanagercan: •LaunchRDP,SSHandsi mi l arsessi onsandaut omat et hel ogi npr ocess.

•Tempor ar i l yat t achaut hor i z eduser st opr i vi l egedsecur i t ygr oups.

•Tempor ar i l yaddpubl i ckeyst oSSHaut hor i z ed_keysfil es.

Passwor dsar er ar el ydi spl ayed,socannotbeshar ed,r et ai nedorcompr omi sed.

Se s s i o nRe c o r d i ng Re c or da dmi ni s t r a t ors e s s i onsf ora c c ount a bi l i t ya ndf or e ns i ca udi t s Pr i vi l egedAccessManagercanbeconfigur edt or ecor dl ogi nsessi onst opr i vi l egedaccount s.Thi s i ncl udesscr eencapt ur e,keyl oggi ng,copybuf f ercapt ur eandevenwebcam snapshot s.Thi s syst em usesAct i veXanddoesnotr equi r ecl i entsof t war ei nst al l at i onorapr oxyser ver .Ext ensi ve ACLsandwor kflowspr ot ectt hepr i vacyofr ecor dedsessi ons.

© 2013Hi t achiI DSyst ems,I nc.Al lr i ght sr eser ved.

Al lot hermar ks,symbol sandt r ademar ksar et hepr oper t yoft hei rr espect i veowner s.

Hi t achiI DPr i vi l egedAccessManager

2

Readt hi sbr ochur eonl i ne:

I nc l ud e dCo nne c t o r s Di r e c t o r y Wi ndows/ Act i veDi r ect or y,LDAP,eDi r ect or y,NDS

F i l e / P r i nt

Re p o r t s Ac c ount a bi l i t ya ndt r a ns pa r e nc y Manybui l t i nr epor t sanswer : •Whatcomput er sar eont henet wor k?

•Whi chsyst em i smanagedbywhi chadmi ni st r at or ?

•Whohasr equest edonet i meaccess?

•Whosi gnedi nt ot hi scomput er ?

•Whi chcomput er swer eunr esponsi vedur i ngt hepastNdays?

Wi ndows,Net War e,Samba,NASappl i ances

Da t a b a s e Or acl e,Sybase,SQLSer ver ,DB2/ UDB

Uni x Li nux,Sol ar i s,AI X,HPUXwi t hpasswd,shadow,TCB,Ker ber os, NI SorNI S+

Ma i nf r a me s / Mi ni z / OSwi t hRACF,TopSecr etorACF/ 2;i Ser i es;Scr i pt sf orVM/ ESA, Uni sys,Si emens,OpenVMS,Tandem

Ac c e s sCo nt r o lP o l i c yEng i ne

Ap p l i c a t i o n

De t e r mi newhoc a nc onne c tt oe a c ha c c ount

Or acl eeBi z ,Peopl eSof t ,SAPR/ 3,JDEandmor e

Secur i t yof ficer ssetpol i cyt ol i nkgr oupsofuser st ogr oupsofpr i vi l egedaccount sandsyst ems.

Ne t wo r k i ng Net wor kdevi cesandVPNsvi aAD,LDAP,SSH

Wo r k flo wRe q ue s t s ,Ap p r o v a l s

F l e x i b l eAg e nt s

Ra pi de me r ge nc yr e s pons ea ndwor k flowfle x i bi l i t y

API ,SSH,Webser vi ce,Br owseremul at i on,Tel net ,TN3270, TN5250,HTTP( S) ,SQLi nj ect i on,LDAPat t r i but esand commandl i ne

Apower f ulwor kflow engi neal l owsuser st or equestonet i meaccesst opr i vi l egedaccount s.Access i ssubj ectt opol i cy-whocanask,whomustappr ove.Emai li nvi t esaut hor i z er st ovi si tasecur e webf or m andappr oveorr ej ectr equest s.

Cl o ud / Sa a S

Ra nd o mi z eSe r v i c eAc c o untP a s s wo r d s Se a ml e s si nt e gr a t i onwi t hWi ndowss e r v i c ei nf r a s t r uc t ur e

WebExConnect ,Googl eApps,Sal esf or ce. com,Ul t i Pr oHR,Of fice 365,Cyber shi f t

Ne t wo r kDe v i c e s Ci sco,Juni per

Aut omat i cal l ynot i fiesWi ndowsSer vi ceCont r olManager ,Schedul er ,I I Sandot hercomponent sof new passwor ds.

I nc i d e ntMa na g e me ntI nt e g r a t i o ns

We bSe r v i c e sAP I El i mi na t e ss t a t i c ,e mbe dde dpa s s wor ds

Aut omat i cal l ycr eat e,updat eandcl oset i cket son: •Axi osAssyst •BMC/ RemedyARS •BMCSDE •CAUni cent er •Cl ar i f yeFr ont Of fice •Fr ont RangeHEAT •HPSer vi ceManager •Numar aTr ackI T! •Symant ec/ Al t i r i s •Ti vol iSer vi ceDesk •Ser vi ceNow

AnAPI ,aut hent i cat edwi t hauser I D,aonet i mepasswor dandanI Psubnetel i mi nat esst at i c passwor dsembeddedi nappl i cat i ons.

Addi t i onali nt egr at i onsvi aemai l ,ODBC,webser vi cesand webf or msar eavai l abl e.

L a p t o pSup p o r twi t haL o c a lSe r v i c e

Hi t achiI DPr i vi l egedAccessManageri spar toft heHi t achi I DManagementSui t e,whi chal soi ncl udes:Passwor d Managerf orsel f ser vi cemanagementofaut hent i cat i on f act or sandI dent i t yManagerf oruserpr ovi si oni ng.

Se c ur ea c c e s st omobi l ede v i c e s Cl i entsof t war ef orWi ndowsandLi nuxl apt opsal l owsPr i vi l egedAccessManagert osecur e passwor dsonmobi l edevi cest hatar ef r equent l ydi sconnect edorpower eddown.

© 2013Hi t achiI DSyst ems,I nc.Al lr i ght sr eser ved.

Al lot hermar ks,symbol sandt r ademar ksar et hepr oper t yoft hei rr espect i veowner s.

Formor ei nf or mat i on,pl easevi si t :ht t p: / / hi t achi i d. com/ orcal l :1.

403.

233.

0740 |1.

877.

386.

0372